Image processing device having erase control

ABSTRACT

An image processing device comprises an image data input means  2 , an image data storage means  12  for storing the image data being input, an image data processing means  6  having multiple processing modes for outputting the stored image data, and a image data erasing means for erasing the image data stored in the storage means  12 . The device further comprises erase count control means  8, 14  for controlling the number of times for erasing image data capable of having the number of times of erase set arbitrarily according to the security level required for each mode, and capable of having the set number of times of erase changed in mid-flow. Confidentiality is protected by performing erase operations repeatedly to the region storing the unnecessary image data according to the security level.

TECHNICAL FIELD

The present invention relates to an image processing device such as adigital multifunctional device including a scanner and a printer, andpreferably relates to an image processing device connected to acommunication path such as a network and having, in addition to thecopier function mentioned above, an image communicating function and aprinter function, and more specifically, relates to an image processingdevice that temporarily stores the image data inputted to themultifunctional device in a memory equipped thereto so as to process theinput image data, and erases the stored image data from the memory whenthe processing is completed.

DESCRIPTION OF THE BACKGROUND ART

Conventionally, digital multifunctional devices are available in themarket for electronically scanning a document image by a scanner andoutputting the image data transmitted from the scanner through aprinter. Recently, improved digital multifunctional devices haveappeared, equipped with a communication function (including a facsimilefunction and a printer function) to transmit and receive image datathrough communication with external devices. Further, the improveddigital multifunctional devices are equipped with memories fortemporarily storing the image data to be processed, so as to processlarge amounts of image data and multiple jobs efficiently.

On the other hand, there are various types of memories or storagedevices for storing the image data, including hard disk devices usingmagnetic recording medium, and semiconductor memories. Such variousmemories have different environments for storing the image data, such asthe memory capacity, cost, writing speed, readout speed, and whether itis volatile or nonvolatile.

Especially in a memory utilizing a magnetic recording medium such as ahard disk device, the disk (recording medium) is divided into smallunits, and each region is managed by a management data called FAT (fileallocation table). When data is recorded in a region of the disk(recording medium), the FAT data is updated accordingly, and whenreading out the data stored in the regions, the reading is performedbased on the FAT data.

Currently, the hard disk device is disposed in the digitalmultifunctional device as an auxiliary memory of the semiconductormemory, considering memory capacity, price (cost of parts), and datatransmission speed, and while a certain volume of job data are processedin the semiconductor memory, the newly input job data is temporarilystored in the hard disk, so that when the order for processing the newjob data arrives, the data is read out onto the semiconductor memory forprocessing. The above configuration is provided in the market as asystem for processing image data (digital multifunctional device)capable of efficiently processing a large amount of job data withoutdelay.

However, the processing of a highly confidential document data by thistype of digital multifunctional device may cause security problems. Forexample, the job data (image data) stored temporarily in each of theregions of the hard disk remain as data even when the job data hasbecome unnecessary and the FAT data has been updated to store new imagedata, unless the newly inputted image data is overwritten on the regionstoring the unnecessary image data based on the FAT data, or unless theunnecessary image data remaining in the data regions are erasedforcibly.

In order to overcome this drawback, Japanese Patent Laid-OpenPublication No. 9-284572 discloses a system that forcibly erases theregion storing the image data of the hard disk or overwrites irregularpatterned images created by random numbers on the region when theprocessing of the image data is completed in the digital multifunctionaldevice, so that the stored data cannot be reproduced as image.

However, strictly speaking, since the memory is composed of a magneticstorage medium, the previously stored image data is not completelyimpossible to read even after overwriting new image data or specificpattern on the data once, or by erasing the data.

Therefore, the present invention aims at solving the above-mentionedproblems of the prior art. The object of the invention is achieved byproviding an image processing device that, upon erasing the image datastored in the memory, repeats erasing operation for the regions storingthe image data according to its security level so as to achievesufficient protection of confidentiality of the image data.

Another object of the present invention is to provide an imageprocessing device that enables the number of times of erase (erasecount) to be designated from an external device corresponding to thesecurity level of the image data when the processing of the image datais requested from the external device, in case the digitalmultifunctional device is equipped with a device having a communicationfunction that enables image data to be transmitted to and received froman external device through communication. Thus, the unnecessary imagedata stored in the image data storage means can be erased without failby performing erase of the image data for a number of times designatedthrough the external device, according to which the security level ofthe device with respect to the image data received from the externaldevice via the image data communication means is increased.

Yet another object of the present invention is to provide an imageprocessing device that performs erase operation based on the presetnumber of times for erasing the image data set in the digitalmultifunctional device, and when the digital multifunctional device isequipped with a device having a communication function that enablesimage data to be transmitted to and received from an external devicethrough communication, when a request for image data processing isentered through the external device, enables the erase count accordingto the security level of the image data to be designated through theexternal device, and performs erase operation by prioritizing the erasecount of image data designated through the external device to the erasecount of image data preset to the digital multifunctional device.

DISCLOSURE OF THE INVENTION

The present invention achieves the above-mentioned objects by an imageprocessing device comprising an image data input means for inputtingimage data, an image data storage means for storing the image datainputted through the image data input means, an image data processingmeans for outputting the image data stored in the image data storagemeans, and an image data erasing means for erasing the image data storedin the image data storage means, wherein the image processing devicefurther comprises an erase count control means for performing the eraseoperation to the image data to be erased by the image data erasing meansfor multiple times.

Further, according to the image processing device of the presentinvention, in addition to the above features, if the image dataprocessing means has multiple different processing modes, the erasecount control means is capable of arbitrarily setting up the number oftimes of erase according to a required security level for each of theprocessing modes by which the image data to be erased is outputted.

In addition to the above features of the image processing device of thepresent invention, if the image data processing means has multiplevarying processing modes, the erase count control means is capable ofarbitrarily setting up the number of times of erase operation accordingto a required security level for each of the processing modes by whichthe image data to be erased is outputted, and also capable of changingin mid-flow the number of times of erase being set.

As explained, by repeatedly erasing the stored image data to be erasedfor a set number of times according to the process mode, the storedimage data can be erased without fail according to its security level,so the security of the image data can be improved. Furthermore, byenabling the total number of erase operation to be varied in mid-flowduring erase of the stored image data, the number of times for erasingthe stored image data can be increased or decreased according to itssecurity level, and the security level of the image data can beincreased. Moreover, the present invention prevents deterioration ofprocessing efficiency of the device by carrying out erase operations notmore than necessary.

Furthermore, according to the image processing device of the presetinvention, in addition to the features mentioned above, the erase countcontrol means is equipped with an erase count setup means forarbitrarily setting up the number of times for erasing the image data bythe image data erasing means according to each processing mode, and anerase count changing means for changing in mid-flow the number of timesof erase being set. As explained, by allowing the number of times forerasing the image data by the image data erase means to be setarbitrarily, the most suitable number can be set to correspond to theenvironment of the installation site (various handling levels forvarious document images at the installation site) by which the securitylevel is increased, and on the other hand, the erase operation is notrepeated more than necessary, so the process efficiency of the imagedata of the image processing device is not deteriorated. Further, whileerasing the stored image data to be erased, the number of times of eraseoperation can be varied in mid-flow, so that the erase count can beincreased or decreased according to the security level of the storedimage data, thus the security level of the image data can be increased.

According further to the present invention, the object of the presentinvention can be achieved by an image processing device comprising animage data reading means for inputting image data, an image datacommunicating means for communicating the image data with an externaldevice, an image data storage means for storing the image data inputtedfrom the image data reading means and from the external device via theimage data communicating means, an image data processing means foroutputting the image data stored in the image data storage means, and animage data erasing means for erasing the image data stored in the imagedata storage means, wherein the image data erasing means is equippedwith a function to receive via the image data communicating means fromthe external device the image data and the number of times for erasingthe image data, and a function to erase the unnecessary image datastored in the image data storage means based on the number of times forerasing the image data designated by the external device.

Further in addition to the above features, the image processing deviceof the present invention comprises an image data erase count setup meansfor setting the number of times for erasing the image data stored in theimage data storage means, wherein the image data erasing means isequipped with a function to receive the set number of times for erasingthe image data from the image data erase count setup means, a functionto receive via the image data communicating means from the externaldevice the image data and the number of times for erasing the imagedata, and a function to erase the unnecessary image data stored in theimage data storage means based on the number of times for erasing theimage data designated from the external device, by prioritizing thenumber of times for erasing the image data designated from the externaldevice over the number of times for erasing the image data set inadvance through the image data erase count setup means.

In addition to the features of the image processing device of thepresent invention mentioned above, the image data storage means is astorage device equipped with a magnetic memory medium. By forming theimage data storage means with a magnetic memory medium, the image datastored in the magnetic memory device can be erased without fail and thesecurity level of the image data is further enhanced.

According to the image processing device of the present invention, thenumber of times for erasing the image data is the number of times foreither erasing or overwriting a storage region of the unnecessary imagedata to be erased.

According to the invention, the number of times for erasing the imagedata can be set and varied arbitrarily according to the security levelof the image data.

The “erasing” of image data according to the present invention is notlimited to simply erasing (clearing) the image data, but also includesmaking it impossible to read the image data (invalidation) byoverwriting white image data or unspecified pattern image formed byrandom number generation to the image data region.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is an explanatory view showing the schematic configuration of adigital multifunctional device or image processing device according toone embodiment of the present invention;

FIG. 2 is an explanatory view showing the structure of an operation unitaccording to the image processing device of the invention;

FIG. 3 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (normal status);

FIG. 4 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (status in which an icon is displayed indicating that “image dataerase process” is operable);

FIG. 5 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (version data display screen);

FIG. 6 is an explanatory view showing a screen displayed on the LCDpanel of FIG. 2 (“image data erase process” operating screen);

FIG. 7 is an explanatory view showing a screen displayed on the LCDpanel of FIG. 2 (“image data erase process” operation statusconfirmation screen);

FIG. 8 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (security setup display screen);

FIG. 9 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (erase confirmation screen);

FIG. 10 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (data erase operation progress status display screen);

FIG. 11 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (“all data area erase count” setup screen);

FIG. 12 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (screen for confirming the automatic erase count for each modeand for selecting the mode to be set);

FIG. 13 is an explanatory view of a screen displayed on the LCD panel ofFIG. 2 (screen for setting up the automatic erase count for the selectedmode);

FIG. 14 is a flowchart (number 1) explaining the flow of the process forcopy mode;

FIG. 15 is a flowchart (number 2) explaining the flow of the process forcopy mode;

FIG. 16 is an explanatory view showing the setup screen (print driverscreen) displayed on the display of an external device through which aprint job is demanded; and

FIG. 17 is a flowchart explaining the flow of the process during printmode.

BEST MODE FOR CARRYING OUT THE INVENTION

One preferred embodiment of the image processing device according to thepresent invention will now be explained with reference to the drawings.FIG. 1 is an explanatory view showing the schematic configuration of thedigital multifunctional device which is the image processing deviceaccording to one embodiment of the present invention.

As shown in FIG. 1, the digital multifunctional device 1 according tothe embodiment comprises an image reading unit 2, an operation unit 4,an image forming unit 6, a device control unit 8, a communication unit10, a hard disk (HD) 12 and a managing unit 14.

The image reading unit 2 comprises, for example, as shown in FIG. 1, aCCD (charge coupled device) 2 a as image reading device, which is animage data reading means for reading the image data, and functions asone of the image data input means for inputting the image data.

The operation unit 4 comprises, as shown in FIG. 1, an input unit 4 aequipped with various input keys etc. and a display unit 4 b equippedwith an LCD (liquid crystal display) or other display means, andfunctions as means for manipulating the device, entering the number oftimes of erase and displaying the number of times of erase, and also asan image data erase count setup means for setting the number of times oferase for the image data stored in the hard disk 12 functioning as theimage data storage means.

The image forming unit 6 comprises, as shown in FIG. 1, a volatilememory 6 a and a print unit 6 b such as an LSU (laser scanning unit),and functions as image data processing (output) means for processing(outputting) the image data stored in the image data storage means orhard disk 12.

The device control unit 8 and the managing unit 14 function as imagedata erase means for erasing (invalidating) the image data stored in thehard disk 12 based on a program set optionally.

Furthermore, the device control unit 8 and the managing unit 14 alsofunction as erase count control means for erasing the object image datafor a number of times repeatedly by the image data erase means accordingto an optionally set program.

The communication unit 10 controls the communication between an externalnetwork 15, and functions as image data communication means forcommunicating image data with external devices PC1, PC2 . . . connectedto the network 15, and also functions as one of the image data inputmeans for inputting image data to the image data storage means.

The hard disk 12 functions as an image data storage means for storingthe image data inputted through various input means (input meanscorresponding to various modes of the digital multifunctional device 1;such as scanner, facsimile and network). The image data storage meanscan be constructed as a memory unit having a magnetic recording medium.

The managing unit 14 manages the whole device and also manages processessuch as the erasing of unnecessary data.

According to the digital multifunctional device 1 of the presentinvention, the image data erase means for erasing the unnecessary imagedata stored in the hard disk 12 is equipped with a function to receivethe number of times for erasing the image data set through the operationunit 4, a function to receive the image data and the number of times forerasing the image data from external device PC1, PC2 and so on via acommunication unit 10, and a function to erase the unnecessary imagedata stored in the hard disk 12 according to the number of times forerasing the image data designated through the external device PC1, PC2and so on by prioritizing the number of times for erasing the image datadesignated through the external device PC1, PC2 and so on over thenumber of times for erasing the image data set in advance through theoperation unit 4.

According to the digital multifunctional device 1 of the presentinvention, the number of times for erasing the image data is the numberof times for either erasing or overwriting the memory region storing theunnecessary image data to be erased.

When the digital multifunctional device 1 according to the presentembodiment is used as a copying machine, the image data of the documentbeing read in through the image reading unit 2 is output from the imageforming unit 6 as copy.

As shown in FIG. 1, the image reading unit 2 is equipped with a CCD 2 acapable of electronically reading the image of the document set toreading position. The image data of the document being read is completedas output image on a volatile memory 6 a and then stored in the harddisk 12 temporarily. When there are multiple documents, this reading andstoring operation is performed repeatedly.

Thereafter, based on the processing mode designated through theoperation unit 4, the image data stored in the hard disk 12 are read outsequentially at appropriate timings and sent to the volatile memory 6 a.Then, in timing with the writing of the data to the print unit 6 b, theimage data is transferred from the volatile memory 6 a to the print unit6 b.

Further, when the image data being input are to be printed out asmultiple copies, the image data is stored in page units to the hard disk12 as output image, and in response to the output mode, the data is sentfrom the hard disk 12 to the volatile memory 6 a, and then transferredtherefrom to the print unit 6 b repeatedly for a number of timescorresponding to the number of copies to be output in timing with thewriting of data to the print unit 6 b.

Next, in utilizing the digital multifunctional device 1 according to thepresent embodiment as a printer, the image data received by thecommunication unit 10 is output from the image forming device 6 via thevolatile memory 6 a.

As shown in FIG. 1, the communication unit 10 is connected with anetwork 15 via a communication cable and the like, and can receive imagedata from external devices such as personal computers (PC) PC1, PC2 andso on connected to the network 15. The image data received by thecommunication unit 10 are sent in page units as image data for output tothe volatile memory 6 a, and then stored in the hard disk 12temporarily. Thereafter, the image data is sent again from the hard disk12 to the volatile memory 6 a before being transferred to the print unit6 b, similarly as when the device is used as a copying machine.

Moreover, when utilizing the digital multifunctional device 1 accordingto the present embodiment as a network scanner, the image data of thedocument being read in through the image reading unit 2 can betransmitted through the communication unit 10 to an external device(PC1, PC2 and so on) such as an arbitrary personal computer.

Also in this example, the CCD 2 a equipped to the image reading unit 2is used to read the document image electronically. Then, the documentimage data being read is completed as output image on the volatilememory 6 a and then stored in the hard disk 12 temporarily. Thereafter,the data is sent from the hard disk 12 back to the volatile memory 6 a,and based on the instructions provided through the operation unit 4, acommunication between a designated destination is established, and thedata is transmitted via the communication unit 10 to a targetdestination.

Other than the network 15, the communication unit 10 is connected with atelephone circuit (not shown), so that when the digital multifunctionaldevice 1 according to the present embodiment is utilized as a facsimile,a similar operation is performed, and document image can be transmittedto and received from external communication devices.

In the present explanation, the digital multifunctional device 1 isequipped with a hard disk 12 functioning as storage means fortemporarily storing the image data, but the present invention is notlimited to such example, and the digital multifunctional device 1 canalso be equipped with a nonvolatile memory capable of maintaining thestored image data even when it is removed from the device body, or amemory having a backup function, or other memory units (media) utilizingmagnetic recording media.

Each component constituting the digital multifunctional device 1according to the present embodiment is controlled via the device controlunit 8, which monitors the instructions for operation entered throughthe input unit 9 a, such as tablets and key groups, equipped to theoperation unit 4, and displays the guidance information to be notifiedto the user, such as information related to the status of the digitalmultifunctional device 1, via the display unit 4 b.

The managing unit 14 manages the information related to the variousunits or components controlled by the device control unit 8, and basedon this information, the device control unit 8 controls the overalloperation of the digital multifunctional device 1.

Next, with reference to FIG. 2, the structure of the operation unit 4 acomprising the input unit 9 a and display unit 4 b is explained indetail.

FIG. 2 is an explanatory view illustrating the operation unit 4 indetail. As explained earlier with reference to FIG. 1, the operationunit 4 comprises an input unit 4 a and a display unit 4 b, and theoperation unit 4 is composed of an operation panel 40 as shown in FIG.2.

The operation panel 40 includes a liquid crystal display panel 41 asshown in FIG. 2. The input unit 9 a includes a group of keys that aredisposed adjacent the LCD panel 41 (on the right side of FIG. 2), whichinclude a “start” key 16 for demanding the device to start copying, an“all clear” key 17 for interrupting the process being executed, a“clear” key 18 for clearing the contents of the designated mode, a “ten”key 22 for designating the number of copies to be made etc., a “printer”key 23 a, a “fax/image transmission” key 23 b and a “copy” key 23 cfunctioning as mode switching keys, a “job status” key 25 for confirmingthe status of the jobs (reserved jobs), and a “user setup” key 24.

The display unit 4 b is composed of a dot-matrix LCD panel 41, capableof displaying a detailed guidance to provide necessary information tothe user of the digital multifunctional device 1 according to thepresent embodiment.

Furthermore, a transparent touch panel (transparent tablet) is disposedon the screen of the LCD panel 41, which functions as a part of theinput unit 4 a for entering demands to the system by manipulating thetouch panel according to the guidance information displayed on the panel41.

Next, the security system equipped to the digital multifunctional device1 according to the present embodiment will be explained.

As for the simplified process flow, the image data to be processed inthe device is stored temporarily in the hard disk 12.

Thereafter, when the processing of the stored image data (output of thestored image data) is completed and the data no longer becomesnecessary, the image data is erased (invalidated) from the hard disk 12.

At this time, the stored image data is erased (invalidated) by repeatingthe erase process for a number of times set according to the securitylevel of each process mode (for example, copy mode, print mode, fax modeand scanner mode).

The following explanation refers to a copying operation in which thedocument image data is read into the device and then output through theprinter as recorded matter, but the present embodiment is not limited tosuch example, and the same process can be applied when the presentdigital multifunctional device 1 is utilized as a printer or as atransmission device such as facsimile or network scanner in which theimage data read into the device via a scanner is transmitted.

FIGS. 3 through 13 illustrate the screens displayed on the LCD panel 41of the display unit 4 b of FIG. 2, which explain how the display 4 bchanges according to each step for erasing (invalidating) theunnecessary image data from the hard disk 12 according to its securitylevel when the “image data erase process function” for erasing the imagedata temporarily stored in the hard disk 12 is active.

Further, FIG. 14 is a flowchart showing the sequence of process stepsfor erasing the image data on the hard disk 12 from the time the powerof the digital multifunctional device is turned on and warm-up isstarted to the time the device is at standby being ready for operation,and FIG. 15 is a flowchart showing the sequence of process steps forperforming a copy operation and then erasing the image data stored inthe hard disk 12 by the digital multifunctional device 1 according tothe present embodiment.

FIG. 3 shows a display screen (basic screen) 41 a of the LCD panel 41 inwhich the “image data erase process function” has not yet beenactivated, and in the digital multifunctional device 1 according to thepresent embodiment, the “image data erase process function” is afunction that is preinstalled to the device, but is initially not activein default.

The “image data erase process function” can be activated by entering andsetting a product key at the installation site when security regardingdocument data and the like is required. The art of selectivelyvalidating a preinstalled function with a product key is disclosed inthe application (Japanese Patent Laid-Open No. 2001-309099) filed by thepresent applicant.

FIG. 4 is a view showing the status in which an icon 42 indicating thatthe “image data erase process function” is in operable state isdisplayed on the lower left corner of the screen 41 a of the LCD panel41, notifying the user that the “image data erase process function” hasbeen validated by the entry of the product key.

When a finger is pressed against (touches) the icon 42 displayed at thelower left corner of the screen 41 a of the LCD panel 41 shown in FIG. 4while the “image data erase process function” is not activated (when thedevice is at standby), the screen 41 a of the LCD panel 41 is changed towhat is shown in FIG. 5. Then, as shown in FIG. 5, a window is displayedsubstantially at the center of the screen 41 a of the LCD panel 41indicating the version data etc. of the present function related to thesecurity kit.

The “image data erase process function” is handled as “data securitykit”, which is an option in the digital multifunctional device 1, soguidance thereof is displayed in the window as “data security kit”.Thereby, the contents of the “data security kit” and the “image dataerase process function”, the version and the operation status thereofcan be confirmed.

When the “image data erase process function” is operating since a jobhas been completed or cleared (when the data stored in the hard disk 12is being erased), a window is displayed at the substantial center of thescreen 41 a of the LCD panel 41 indicating that data is currently beingerased, as shown in FIG. 6.

Moreover, if enabling the set number of times of erase to be changed inmid-flow, the window displays the number of times of erase process forthe current job data (default number of times: once), and also displaysan “up key” 43 a, a “down key” 43 b and a “cancel key” 43 c foroptionally changing the number of times of erase process to be performedby the decision of the user (default number of times: once).

If the icon 42 on the lower left corner of the screen 41 a of LCD panel41 is pressed with a finger (touched) at this time, the screen 41 a ofthe LCD panel 41 is changed to what is shown in FIG. 7. Here, as shownin FIG. 7, a window is displayed on the substantial center of the screen41 c of LCD panel 41 indicating that image data in the hard disk 12 isbeing erased according to the “image data erase process function”, andthe status of progress of the process is displayed in levels. Thisdisplay enables the operation status of the erasing process according tothe “image data erase process function” to be confirmed.

While the image data in the hard disk 12 is being erased by the “imagedata erase process function”, it may be effective to have a display thatis different from normal states, such as to have the icon blink duringthe erase procedure, so that one can recognize at once that the imagedata erasing process is underway.

Moreover, if the set number of times of erase is enabled to be changedin mid-flow, similar to the window of FIG. 6, the present window candisplay the number of times of erase process set for the current jobdata (default number of times: once), and also display an “up key” 43 a,a “down key” 43 b and a “cancel key” 43 c for optionally varying thenumber of times of erase process by the decision of the user (defaultnumber of times: once). By manipulating the “up key” 43 a and the “downkey” 43 b, the preset number of times for carrying out the erase process(invalidation process) for the unnecessary image data can be varied inmid-flow. Moreover, by manipulating the “cancel key”, the erase process(invalidation process) being performed currently can be interrupted inmid-flow.

Next, FIG. 8 illustrates a detailed setup display screen (security setupscreen) 44 of the LCD panel 41, enabling one to arbitrarily set up thenumber of times for erasing (invalidating) the image data stored in thehard disk 12 based on the various security levels of the document datadetermined at the installation site, or to start the “image data eraseprocess function” to forcibly erase (invalidate) the image data storedin the hard disk 12.

By setting in advance the number of times of erase that is most suitablefor the selected security level at the installation site using thesecurity setup screen 44, the image data will be erased repeatedly whenthat image data becomes unnecessary, so the security level at theinstallation site can be maintained, and the deterioration of theprocess level of the image data of the device caused by the improvementof the security level can be suppressed to a minimum.

Further, the number of times of erase process can be varied arbitrarilyby the user during the erase operation by manipulating the “up key” 43a, the “down key” 43 b or the “cancel key” 43 c displayed on the windowshown in FIG. 6 and FIG. 7.

The following scene of use is exemplified. The erase process is startedwhen a copy job for one document is completed, but in case a copy jobfor a new second document is waiting to be performed, the security levelof the first document can be determined and changed arbitrarily by theuser. If the user determines that the document is important, the userconfirms the number of times of erase process being set, and increasesthe number. On the contrary, if the user determines that the level ofimportance is low, the user reduces the number of times of eraseprocess. Furthermore, if the user feels that the erase process is notnecessary, the user can cancel the erase process itself to start thecopy operation of the next document.

Further, since the image data stored in the hard disk 12 can be erased(invalidated) at an arbitrary timing, the present embodiment iseffective when the user wishes to process very important document data.

The following is a simplified explanation of the operations according tothe various modes.

(All Data Area Erase Mode)

When the “all data area erase” key 44 a displayed on the upper left areaof the security setup screen 44 on the LCD panel 41 shown in FIG. 8 ispressed (touched), the image data written (remaining) on the hard disk12 at that time is totally erased (invalidated). At this time, aconfirmation window is displayed temporarily on the center of thesecurity setup screen 44 of the LCD panel 41 (FIG. 9), and when the“erase” key 45 shown in FIG. 9 is manipulated, the erasing of image dataon the hard disk 12 is started. At this time, the security setup screen44 of the LCD panel 41 is changed to what is shown in FIG. 10, andindicates in levels the progress status of the data erase operation ofthe hard disk 12 by a window screen.

Furthermore, as shown in FIG. 8, on the right side of the “all data areaerase” key 44 a on the security setup screen 44 of the LCD panel 41appears an “all data area erase count” key 44 b for setting, betweennumbers 1 through 7, for example, the number of times for repeatedlyexecuting the “all data area erase” process. Next to the “all data areaerase count” key 44 b is displayed the number being set (the defaultvalue is “1”).

When the “all data area erase count” key 44 b on the security setupscreen 44 is pressed by a finger (touched), the security setup screen 44on the LCD panel 41 changes to the “all data area erase count” setupscreen 46 as shown in FIG. 11, and by manipulating an “up” key 46 a or a“down” key 46 b of the “all data area erase count” setup screen 46, thenumber of times for erasing the data can be determined arbitrarily, forexample, between numbers 1 through 7.

(Automatic Data Erase Mode at Power-On)

When an “automatic erase at power-on” key 49 c displayed at the middleof the security setup screen 44 on the LCD panel 41 as shown in FIG. 8is pressed (touched), a checkmark appears in the box of the key, and itbecomes possible to set up an automatic data erase mode in which theimage data on the hard disk 12 is erased every time the power of thedigital multifunctional device 1 is turned on.

On the right side of the “automatic erase at power-on” key 44 c of thesecurity setup screen 44 on the LCD panel 41 is displayed, as shown inFIG. 8, a “number of times of automatic erase at power-on” key 44 d thatenables the number of times for repeatedly executing the “automaticerase at power-on” to be set up, for example, between numbers 1 through7. The number of times being set up is displayed next to the “number oftimes of automatic erase at power-on” key 44 d. (According to thedefault status, the automatic power-on erase mode is not activated andthe number is “0”, but when the automatic erase mode at power-on on theleft side is selected, a number “1” is set.)

When the “number of times of automatic erase at power-on” key 44 d onthe security setup screen 44 is pressed (touched), the security setupscreen 44 on the LCD panel 41 changes to the “all data area erase count”setup screen 46 as shown in FIG. 11, and by manipulating the “up” key 46a or the “down” key 46 b on the “all data area erase count” setup screen46, the number of times for executing erase can be determinedarbitrarily, for example, between numbers 1 through 7.

(Automatic Data Erase Mode at Termination of Each Job for Each ProcessMode)

When an “automatic erase count for each mode” key 44 e displayed on thelower area of the security setup screen 44 on the LCD panel 41 shown inFIG. 8 is pressed (touched), the number of times for erasing from thehard disk 12 the data related to a completed job whenever a job of aprocess (output of stored image data) based on the various process modesof the device 1 (such as the copy mode, print mode, fax mode and scannermode) is completed can be set for each process mode.

When the “automatic erase count setup for each mode” key 44 e of thesecurity setup screen 44 on the LCD panel 41 is pressed (touched), thesecurity setup screen 44 changes to the “automatic erase count for eachmode” setup screen 47, and the “automatic erase count for each mode”setup screen 47 is displayed on the LCD panel 41, according to which thecurrent status of the number of times of automatic erase being set upfor each mode can be confirmed, and the key of the process mode that onewishes to change the set erase count for is manipulated and the erasecount setup screen is displayed.

Furthermore, in the “automatic erase count for each mode” setup screen47 of the LCD panel 41, as shown in FIG. 12, the numbers being set upfor repeatedly executing the automatic data erase mode when a job iscompleted according to each process mode (default setup value is “1”) isdisplayed under the “coy mode” key 47 a, the “print mode” key 47 b, the“fax mode” key 47 c and the “scanner mode” key 47 d.

When the “copy mode” key 47 a of the “automatic erase count for eachmode” setup screen 47 is pressed (touched), the “automatic erase countfor each mode” setup screen 47 of the LCD panel 41 changes to a “erasecount for copy data” as shown in FIG. 13, and by manipulating the “up”key 48 a or the “down” key 48 b of the “erase count for copy data” setupscreen 48 of the LCD panel 41, the number of times for erasing the datacan be set arbitrarily for example between numbers 1 through 7.

Moreover, the similar setup can be performed for modes other than the“copy mode”. According to the present embodiment, this automatic dataerase mode at termination of each job is activated when the operation ofthe security kit (image data erase process) is approved by the enteringof the product key explained earlier, but the present invention is notlimited to such example, and it is possible to activate this mode fromthe initial state.

As explained above, by purchasing the “data security kit” for need ofsecurity, the “image data erase function” of the image processing devicebecomes operable, and the number of times for executing the “image dataerase function” corresponding to the security level at the installationsite or the security levels of various types of documents handled at theinstallation site can be set. Further, the number of times for executingthe “image data erase function” corresponding to each process mode canalso be set. Moreover, if necessary, it is also possible to designatewhen to start erasing the data on the hard disk.

Then, as explained before, the user can change (in mid-flow) the setnumber of times of erase arbitrarily during the erase operationarbitrarily by manipulating the “up key” 43 a, the “down key” 43 b andthe “cancel key” 43 c displayed on the window of FIGS. 6 and 7.

Now, with reference to the flowcharts of FIGS. 14 and 15, the processflow of a copy mode will be explained.

In FIG. 14, when the power of the digital multifunctional device 1 isturned on, at first, the device control unit 8 (FIG. 1) checks thecomponents that constitute the device (step S101). When there is noproblem found by the check (step S102 “Y”), warm-up is started so as tobring the device to a predetermined operable state (step S103). On theother hand, when malfunction (defect) is recognized (step S102 “N”), anerror process is carried out, according to which a message window isdisplayed on the screen indicating that a malfunction (defect) is foundand that confirmation is requested (step S104).

Next, during normal warm-up, it is checked whether the “automatic erasemode at power-on” for initializing the hard disk 12 at power-on is setor not (step S105), and if this mode is set, the initialization of thehard disk 12 is started (step S106), and at the same time, the status ofprogress of the initialization process is displayed as a window on thescreen (step S107). At this time, the initialization by the erasing ofdata on the hard disk 12 is repeated for a number of times set inadvance through the setup screen of the LCD panel 41 as shown in FIGS. 8and 12 (step S108).

When the above process is completed, the basic screen display as shownin FIG. 4 is displayed on the screen 41 a of the LCD panel 41 of thecontrol panel 40, and when the completion of warm-up is confirmed (stepS109), the device enters a job instruction standby state (step S110).

As shown in FIG. 15, during this stage (standby state), if a document ismounted on the set position on the image reading unit 2 of the digitalmultifunctional device 1, the copy mode for the document is set, and the“start” key 16 (FIG. 2) on the control panel 40 for instructing copystart is pressed (step S111), the document is electronically scanned bya CCD 2 a of the image reading unit 2, and the document is generated asimage data on the volatile memory 6 a in page units (step S112). Then,the image data is stored temporarily on the hard disk 12 from thevolatile memory 6 a, and management information related to the imagedata stored in the hard disk 12 (such as FAT data) are managed by themanaging unit 19 (step S113).

Next, the image data stored in the hard disk 12 is read out as printdata onto the volatile memory 6 a once again in timing with therecording (step S114), and in timing with the printer, the data istransferred to the LSU (laser scanning unit) of the print unit 6 b andprinted out (step S115).

When it is confirmed that the image data has been printed out via theprinter, the management data such as the FAT data are updated as processcomplete (step S116), and when a sequence of printing processes has beencompleted, the memory region to which the image data used for thissequence of printing processes is stored is subjected to the image dataerase process of the hard disk 12 (step S117). At this time, theinitialization by the erasing of data on the hard disk 12 is repeatedfor a number of times set in advance for the copy mode through the setupscreen of the LCD panel 41 shown in FIGS. 8, 12 and 13 (step S118).

If the number of times of erase operation must be changed in mid-flowwhile the initialization by erasing the data of the hard disk 12 isbeing performed for a number of times set in advance by the setup screenof FIG. 12, by manipulating the “down” key 43 b displayed on the windowof FIG. 6 or FIG. 7 (step S119), the set number of times can be reducedonce per each click (step S120). By manipulating the “up” key 43 adisplayed on the window of FIG. 6 or FIG. 7 (step S121), the set numberof times can be increased once per each click (step S122).

Further, by manipulating the “cancel” key 43 c displayed on the windowof FIG. 6 or FIG. 7 (step S123), the data erase process being performedcurrently is interrupted, or the erase process is terminated when thecurrently performed erase process in mid-flow is completed, the eraseprocess is terminated and the device enters a standby mode (step S124).

When there is no need to change the set number of times of erase inmid-flow, the steps from S119 to S124 in the flowchart of FIG. 15 isomitted, and in step S118, whether the set number of times of erase hasbeen reached or not is determined, and if no (N), the erase process isrepeated, and if yes (Y), the device enters a standby mode.

The above description explains the automatic image data erase functionperformed when the processing of document image data by the copy mode iscompleted, but also according to other process functions for the imagedata by the digital multifunctional device 1, the data erase process isautomatically carried out for a predetermined number of times when theprocessing of image data is completed and the data is no longernecessary.

Now we will briefly explain the data erase process, wherein the processis completed by erasing the image data stored in a memory region storingthe image data to be erased that is no longer necessary due tocompletion of processing or interruption.

As for the means for erasing image data, methods such as formatting(clearing) the image data, overwriting white image data thereto, oroverwriting unspecified pattern images created by random numbergeneration, are applied.

In a hard disk device using magnetic recording, it is recommended thatsuch erase operation is repeated so that past data is notdistinguishable from residual magnetic field.

According to such environment, there are cases in which a user demandsimage data processing to be performed at a digital multifunctionaldevice 1 located away from the user. Possible usages include outputdemand of print job by print mode and remote transmission demand oftransmission document by fax mode, and these demands are entered fromexternal devices PC1, PC2 and so on such as personal computers connectedto the network 15 and transferred via the network 15.

In such case, upon sending image data from the personal computer orother external devices PC1, PC2 and so on to the digital multifunctionaldevice 1 and demand transmission, printout and other operations, it iseffective to enable simultaneous designation of the number of times forerasing the image data after the completion of the process. Thus, whenordering image data processing, the user demanding the process can alsodetermine the conditions for erasing the image data according to thesecurity level thereof.

Now, a case in which a print job is ordered is explained briefly withreference to FIG. 16. FIG. 16 is an explanatory view showing the setupscreen (print driver screen) shown on the display of the external devicethrough which the print job is to be ordered.

On the screen 60 a of the display 60 of the personal computer or otherexternal devices PC1, PC2 and so on, as shown in FIG. 16, a setup screen(print driver screen) 61 is displayed as a window, and on the setupscreen (print driver screen) 61 of the display 60 of the externaldevice, the “up key” 62 a or the “down key” 62 b beside the item “erasecount” is clicked to set the number of times for erasing the image data,and a checkmark is entered in a checkbox 63 of the “erase count setup”to complete setting the number of times for erasing the image data.

Thus, in the print mode of the digital multifunctional device 1, forexample, the conditions for erasing the image data after printout iscompleted can be set according to each image data from any personalcomputer or other external devices connected to the network 15.

FIG. 17 is a flowchart explaining the flow of processes during printmode.

First, the print condition/number of times of erase of the image data isset on the setup screen (print driver screen) 61 displayed as window onthe screen 60 a of display 60 of the personal computer or other externaldevices PC1, PC2 and so on connected to the network 15 (step S131).

Next, when execution of print is ordered (“OK” key is clicked) on thesetup screen (print driver screen) 61 on the screen 60 a of display 60of the external device (step S132 “Y”), the data regarding the printdata and number of times of erase are transferred from the personalcomputer or other external devices connected to the network to thedigital multifunctional device (step S133).

Thereafter, printout is prepared (step S134), and the ordered print jobis processed according to conditions that allow the output process (stepS135). When the ordered print job process is completed (step S136), ifthe number of times for erasing the image data is set at the externaldevice (step S137 “Y”), the image data is erased according to the numberof times of erase being set (step S138), and if the number of times forerasing the image data is not set at the external device (step S137“N”), the image data is erased according to the erase conditions set inadvance in the digital multifunctional device 1 (step S139).

Moreover, when the order for print (click of “OK” key) is not performedon the setup screen (print driver screen) 61 on the screen 60 a ofdisplay 60 of the external device (step S132 “N”), and if the “cancel”key is clicked on the setup screen (print driver screen) 61 shown aswindow on the screen 60 of the display of the external device (stepS140), the setting of the order for print conditions/number of times forerasing the image data is cancelled.

INDUSTRIAL APPLICABILITY

The present invention enables to increase the security level of theimage data by repeatedly erasing the image data to be erased stored inthe image data storage means according to its security level, therebyerasing the stored image data without fail.

The present invention enables to set the number of times for erasing theimage data by the erasing means arbitrarily according to each image dataprocess mode, so that the security level can be enhanced according tothe environment of the installation site, while cutting out too mucherasing operations so as not to deteriorate the efficiency to processthe image data by the device.

The present invention enables the number of times of data erase set bythe erase count control means to be changed in mid-flow, so the numberof times for performing erase operation can be increased or decreasedduring erase of stored image data, thus improving the security of theimage data. Moreover, the invention prevents the process efficiency ofthe device to be deteriorated by omitting too much erase operation.

According to the present invention, the image data erase means canaccept the image data and the number of times for erasing the image datafrom the external device via the image data communication means, sosimultaneously as when the image data processing is ordered from theexternal device, the number of times for erasing the image data based onthe security level can be designated from the external device. Thus,based on the number of times for erasing the image data designated fromthe external device, the image data erase means erases the unnecessaryimage data stored in the image data storage means repeatedly, so thatthe data is erased without fail, and sufficient protection of theconfidentiality of the data is achieved.

Furthermore, the security level of the device with respect to the imagedata received from the external device via the image data communicationmeans can be improved.

Moreover, regarding image data subjected to image processing orderedfrom an external device located remotely from the image processingdevice, the number of times for erasing the image data can be setremotely according to the security level thereof, so the user is notrequired to confirm at the device the number of times for erasing theimage data, and the order for processing the image data can be performedefficiently.

According to the present image processing device, the image data erasemeans receives the designated number of times for erasing image data setthrough the image data erase count setup means of the device body, andalso receives the image data and the designated number of times forerasing image data from the external device via the image datacommunication means. Thus, the number of times for erasing the imagedata according to its security level can be designated through theexternal device simultaneously as when the image data processing isordered, and the image data erase means prioritizes the designatednumber sent from the external device over the number of times forerasing the image data predetermined in the image data erase count setupmeans, so the unnecessary image data to be erased stored in the imagedata storage means can be erased repeatedly according to the securitylevel designated from the external device, and the security level can beenhanced.

According to the present image processing device, the image data storagemeans is formed of a memory unit equipped with a magnetic memory medium,so the image data stored in the memory unit with the magnetic memorymedium can be erased without fail, and the security level of the imagedata is improved.

According further to the present image processing device, the number oftimes for erasing the image data is the number of times for eithererasing or overwriting the memory region that stores the unnecessaryimage data to be erased, so the number of times for erasing the imagedata can be determined and changed arbitrarily according to the securitylevel of the image data.

What is claimed is:
 1. An image processing device comprising: an imagedata input unit which inputs image data; a data storage unit whichstores the data inputted through the image data input unit; a dataprocessing unit which outputs the data stored in the data storage unit;and a data erasing unit which erases the data stored in the data storageunit; wherein the data erasing unit includes an erase count setting unitwhich sets in advance a plurality of candidates of a number of times ofdata erase with respect to the data stored in the data storage unit, andan erase control unit which executes an erase procedure with respect tothe data stored in the data storage unit for the number of times set inadvance by the erase count setting unit, the number of times of dataerase set in advance by the erase count setting unit is selected fromthe plurality of candidates during a standby state of the imageprocessing device, and the standby state is after warm-up of the imageprocessing device and before input of job instruction data.
 2. The imageprocessing device according to claim 1, wherein the erase procedure ofthe image data by the erase control unit is overwriting the image datastored in the data storage unit that became unnecessary.
 3. The imageprocessing device according to claim 1, wherein the erase procedure ofthe image data by the erase control unit is overwriting a white data tothe image data stored in the data storage unit that became unnecessary.4. The image processing device according to claim 1, wherein the numberof times of data erase which is set by the erasing count setting unit isa number of times of overwriting an unspecified pattern image formed byrandom number generation to the image data stored in the data storageunit that became unnecessary.
 5. An image processing device comprising:an image data input unit which inputs image data; a data storage unitwhich stores the data inputted through the image data input unit; a dataprocessing unit which outputs the data stored in the data storage unit;and a data erasing unit which erases the data stored in the data storageunit; wherein the data erasing unit includes an erase count setting unitwhich sets in advance a plurality of candidates of a number of times ofdata erase with respect to the data stored in the data storage unit, andan erase control unit which executes an erase procedure with respect tothe data stored in the data storage unit for the number of times set inadvance by the erase count setting unit, the number of times of dataerase set in advance by the erase count setting unit is selected fromthe plurality of candidates at an installation site of the imageprocessing device during a standby state of the image processing deviceand after warm-up of the image processing device and before input of jobinstruction data, and the erase control unit automatically executes theerase procedure at the number of times of data erase set by the erasecount setting unit, when the data processing unit completes a processingof the image data and the image data is no longer necessary.
 6. Theimage processing device according to claim 5, wherein the eraseprocedure of the image data by the erase control unit is overwriting theimage data stored in the data storage unit that became unnecessary. 7.The image processing device according to claim 5, wherein the eraseprocedure of the image data by the erase control unit is overwriting awhite data to the image data stored in the data storage unit that becameunnecessary.
 8. The image processing device according to claim 5,wherein the number of times of data erase which is set by the erasingcount setting unit is a number of times of overwriting an unspecifiedpattern image formed by random number generation to the image datastored in the data storage unit that became unnecessary.
 9. An imageprocessing device comprising: an image data input unit which inputsimage data; a data storage unit which stores the data inputted throughthe image data input unit; a data processing unit which outputs the datastored in the data storage unit; and a data erasing unit which erasesthe data stored in the data storage unit; wherein the data erasing unitincludes an erase count setting unit which sets in advance a pluralityof candidates of a number of times of data erase with respect to thedata stored in the data storage unit, and an erase control unit whichexecutes an erase procedure with respect to the data stored in the datastorage unit for the number of times set in advance by the erase countsetting unit, and the number of times of data erase set in advance bythe erase count setting unit is selected from the plurality ofcandidates at an installation site of the image processing device, theerase control unit comprises a manual instructing unit which instructsan initiation of the erase procedure with respect to the data during astandby state of the device and after warm-up of the image processingdevice and before input of job instruction data, and when theinstruction of the initiation is input from the manual instructing unit,the erase control unit repeats the erasing process at the number oftimes of data erase set by the erase count setting unit, and executesthe erasing procedure of all the data stored in the data storage unit.10. The image processing device according to claim 9, wherein the eraseprocedure of the image data by the erase control unit is overwriting theimage data stored in the data storage unit that became unnecessary. 11.The image processing device according to claim 9, wherein the eraseprocedure of the image data by the erase control unit is overwriting awhite data to the image data stored in the data storage unit that becameunnecessary.
 12. The image processing device according to claim 9,wherein the number of times of data erase which is set by the erasingcount setting unit is a number of times of overwriting an unspecifiedpattern image formed by random number generation to the image datastored in the data storage unit that became unnecessary.